1989-2023
Terms and Conditions
Privacy Policy
Information pursuant to Art. 13 of EU General Regulation 679/2016 on the protection of personal data
INFORMATION ON PERSONAL DATA COLLECTED FROM MEMBERS, ASSOCIATES, CLIENTS AND USERS, PURSUANT TO ARTICLES 13 AND 14 OF EU REGULATION 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL, OF 27 APRIL 2016 (HEREINAFTER “INFORMATION NOTICE”).
The Regulation on the "protection of natural persons with regard to the processing of personal data, as well as the free movement of such data" (hereinafter the "Regulation") contains a series of rules aimed at ensuring that the processing of personal data is carried out in compliance with the fundamental rights and freedoms of individuals. This notice incorporates its provisions.
SECTION 1 - IDENTITY AND CONTACT DETAILS OF THE DATA CONTROLLER.
The company ADA srls, headquartered in Imola at via Manaresi, 13 40026 Bologna, VAT no. 03967951207, hereinafter also referred to simply as the company, in its capacity as Data Controller, informs you that it will process your Personal Data in the manner and for the purposes indicated in Section 2 of this Notice.
SECTION 2 - CATEGORIES OF PERSONAL DATA, SOURCES, PURPOSES AND LEGAL BASIS OF PROCESSING.
Sources of Personal Data.
The company uses the Personal Data you provide, as well as any data that may be acquired in the course of operations
payment of the Law carried out or use of the Ada srls website by you, in compliance with the relevant regulations.
Purpose and legal basis of processing.
Your Personal Data is processed by the company within the scope of its activities for the purposes listed below.
a) For the conclusion and proper execution of the contract.
The provision of Personal Data is a necessary requirement for the completion and execution of the related contract
to teaching activities, to the organization of the company's events, as well as for the supply of goods and services by the same, without which no service can be provided to you by the company.
b) Manage payments made with cards on POS.
The provision of Data is mandatory for the completion of payment operations.
c) Compliance with national and EU regulatory requirements.
The processing of your Personal Data to comply with regulatory requirements is mandatory and, therefore, your consent is not required. Processing is mandatory, for example, when prescribed by anti-money laundering, tax, anti-corruption regulations, fraud prevention in payment services, or to comply with provisions or requests from supervisory and control authorities.
SECTION 3 - CATEGORIES OF RECIPIENTS TO WHOM YOUR PERSONAL DATA MAY BE DISCLOSED.
For the pursuit of the above-mentioned purposes, it may be necessary for the company to disclose your Personal Data to the categories of recipients listed below.
1) Third parties (companies, freelancers, etc.) operating both inside and outside the European Union who process your Personal Data in the context of:
• banking, financial and insurance services;
• payment systems, issuance or management of credit cards;
• storage of documentation relating to relationships with customers;
• audit, financial statement certification;
• management of IT systems and telecommunications networks as well as development and management of IT procedures;
• IT protection and security;
2) Authorities such as, for example, judicial, administrative, etc., by virtue of legal provisions or orders from Authorities. Such Authorities, Entities and/or subjects will operate as independent data controllers.
The third parties to whom your Personal Data may be disclosed act as: 1) Data Controllers, i.e., subjects who determine the purposes and means of the processing of Personal Data; 2) Data Processors, i.e., subjects who process Personal Data on behalf of the Controller; or 3) Joint Controllers who, together with Ada srls, jointly determine the purposes and means of the same.
SECTION 4 - TRANSFER OF PERSONAL DATA TO A THIRD COUNTRY OR TO AN INTERNATIONAL ORGANIZATION OUTSIDE THE EUROPEAN UNION.
Your Personal Data is processed by the company within the territory of the European Union and is not disclosed. If necessary, for technical and operational reasons, the company reserves the right to transfer your Personal Data to countries outside the European Union or to International Organizations for which there are "adequacy" decisions by the European Commission, or on the basis of adequate guarantees provided by the country to which the Data must be transferred or on the basis of specific derogations provided for by the Regulation.
SECTION 5 - METHODS OF PROCESSING AND RETENTION PERIODS OF PERSONAL DATA.
The processing of your Personal Data is carried out using manual, computer, and telematic tools in order to guarantee the security and confidentiality of the data itself. In general, your Personal Data is stored for a period of ten years starting from the termination of the contractual relationship of which you are a part. Personal Data may also be processed for a longer period if an interruptive and/or suspensive act of prescription and/or forfeiture occurs that justifies the extension of data retention.
Security.
ADA srls uses a system for secure payments that complies with national and international standards in force from time to time. At the time of payment confirmation, the transaction data is sent via a secure connection to the institution (Bank/Company) issuing the payment card or to the institution appointed by it, solely for the purpose of obtaining the necessary authorization to execute the transaction.
SECTION 6 - RIGHTS OF THE DATA SUBJECT.
As a data subject, you may exercise, at any time, with respect to the Data Controller, the rights provided for by the Regulation listed below, by sending a specific written request to the e-mail address commerciale@adaricerca.it.
In the same manner, you may revoke at any time the consents given with this Information Notice, without prejudice to the lawfulness of the processing based on the consent given before the revocation. Any communications and actions undertaken by the Foundation, in response to the exercise of the rights listed below, will be carried out free of charge.
However, if your requests are manifestly unfounded or excessive, particularly due to their repetitive nature, the company may charge you a fee, taking into account the administrative costs incurred, or refuse to comply with your requests.
1. Right of access.
You may obtain from the company confirmation as to whether or not your Personal Data is being processed and, if so, obtain access to the Personal Data and the information provided for by Article 15 of the Regulation, including, by way of example, the purposes of the processing, the categories of Personal Data processed, etc.
If Personal Data is transferred to a third country or to an international organization, you have the right to be informed of the existence of adequate safeguards relating to the transfer, as specified in Section 4.
If requested, the company may provide you with a copy of the Personal Data being processed. For any additional copies, Ada srls may charge you a reasonable fee based on administrative costs. If the request is made by electronic means, and unless otherwise indicated, the information will be provided to you by the company in a commonly used electronic format.
2. Right of rectification.
You may obtain from the company the rectification of your Personal Data that is inaccurate as well as, taking into account the purposes of the processing, the integration of such data if it is incomplete, by providing a supplementary statement.
3. Right to erasure (so-called "right to be forgotten").
You may request the Data Controller to delete your Personal Data if one of the reasons provided for by Article 17 of the Regulation exists, including, by way of example, if the Personal Data is no longer necessary for the purposes for which it was collected or otherwise processed, or if the consent on which the processing of your Personal Data is based is withdrawn by you and there is no other legitimate reason for the processing.
We inform you that the company will not be able to proceed with the deletion of your Personal Data if its processing is necessary, for example, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of a right in legal proceedings.
4. Right to restriction of processing.
You may obtain the restriction of the processing of your Personal Data if one of the conditions provided for applies
from art. 18 of the Regulation, among which, for example:
- the dispute regarding the accuracy of your Personal Data, for the period necessary for the Data Controller to carry out the checks;
- the objection to processing, pending verification by the Data Controller regarding the possible prevalence of reasons justifying the processing itself.
5. Right to data portability.
If the processing of your Personal Data is based on consent or is necessary for the execution of a contract or pre-contractual measures and the processing is carried out by automated means, you may:
- request to receive the Personal Data you have provided in a structured, commonly used and machine-readable format
automatic (e.g. computer and/or tablet);
- transmit your Personal Data received to another Data Controller without hindrance from the company. You may also request that your Personal Data be transmitted by the company directly to another data controller indicated by you. In this case, it will be your responsibility to provide us with all the exact details of the new data controller to whom you wish to transfer your Personal Data, providing us with appropriate written authorization.
6. Right to object.
You may object at any time to the processing of your Personal Data if the processing is carried out for the performance of a task in the public interest or for the pursuit of a legitimate interest of the Data Controller (including profiling activities).
Should you decide to exercise the right to object as described here, Ada srls will refrain from further processing your Personal Data, unless there are legitimate reasons to proceed with the processing (reasons that override the interests, rights, and freedoms of the data subject), or the processing is necessary for the establishment, exercise, or defense of a legal claim.
7. Automated decision-making relating to individuals, including profiling.
The Regulation provides the data subject with the right not to be subject to a decision based solely on automated processing of their Personal Data, including profiling, which produces legal effects concerning them or significantly affects them, unless the aforementioned decision:
a) is necessary for the conclusion or execution of a contract between you and the Foundation;
b) is authorized by Italian and/or European law;
c) is based on your explicit consent.
In the cases referred to in letters a) and c), the company will implement appropriate measures to protect your rights, your freedoms, and your legitimate interests, and you may exercise the right to obtain human intervention by the company, to express your opinion, or to contest the decision.
However, please note that the automated processing carried out by the company is necessary for the performance of the contract, as provided for by Art. 22, paragraph 2, letter a), of the Regulation.
8. Right to lodge a complaint with the Data Protection Authority.
Without prejudice to your right to appeal through administrative or judicial channels, if you believe that the processing of your Personal Data by the Controller is in violation of the Regulation and/or current legislation, you may lodge a complaint with the competent Data Protection Authority.
Privacy Policy
Information pursuant to art. 13 of the EU General Regulation 679/2016 on the protection of personal data
INFORMATION ON PERSONAL DATA COLLECTED FROM MEMBERS, MEMBERS, CUSTOMERS AND USERS, PURSUANT TO ARTICLES 13 AND 14 OF EU REGULATION 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL OF 27 APRIL 2016 (HEREINAFTER “INFORMATION”).
The Regulation on the “protection of natural persons with regard to the processing of personal data and on the free movement of such data” (hereinafter the “Regulation”) contains a series of rules aimed at ensuring that the processing of personal data is carried out in compliance with the fundamental rights and freedoms of individuals. This information notice incorporates the provisions.
SECTION 1 - IDENTITY AND CONTACT DETAILS OF THE DATA CONTROLLER.
The company ADA srls, with registered office in Imola in via Manaresi, 13 40026 Bologna, P.i. 03967951207, hereinafter also defined for simplicity, the company as Data Controller, informs you that it will process your Personal Data in the manner and for the purposes indicated in Section 2 of this Policy.
SECTION 2 - CATEGORIES OF PERSONAL DATA, SOURCES, PURPOSES AND LEGAL BASIS OF THE PROCESSING.
Sources of Personal Data.
The company uses the Personal Data provided by you, as well as any data acquired in the context of payment transactions carried out by you or use of the Ada srls website by you, in compliance with the relevant regulations.
Purpose and legal basis of the processing.
Your Personal Data is processed by the company in the context of its business for the purposes listed below.
a) For the conclusion and regular execution of the contract.
The provision of Personal Data is a necessary requirement for the completion and execution of the contract relating to the teaching activity, the holding of the company's events, as well as for the supply of goods and services of the same, in the absence of which no service can be provided to you by the same.
b) Manage payments made with cards on POS.
The provision of Data is mandatory for the completion of payment transactions.
c) Compliance with national and community regulatory requirements.
The processing of your Personal Data to comply with regulatory requirements is mandatory and, therefore, your consent is not required. Processing is mandatory, for example, when it is required by anti-money laundering, tax, anti-corruption, payment services fraud prevention legislation or to comply with provisions or requests of the supervisory and control authority.
SECTION 3 - CATEGORIES OF RECIPIENTS TO WHOM YOUR PERSONAL DATA MAY BE COMMUNICATED.
In order to pursue the purposes indicated above, it may be necessary for the company to communicate your Personal Data to the categories of recipients listed below.
1) Third parties (companies, freelancers, etc.) operating both within and outside the European Union who process your Personal Data in the context of:
• banking, financial and insurance services;
• payment systems, issuing or management of credit cards;
• archiving of documentation relating to relationships with customers;
• accounting audit, financial statement certification;
• management of IT systems and telecommunications networks as well as development and management of IT procedures;
• IT protection and security;
2) Authorities such as, for example, judicial, administrative etc., pursuant to provisions of law or orders of Authorities. Such Authorities, Bodies and/or subjects will operate as independent data controllers.
The third parties to whom your Personal Data may be communicated act as: 1) Data Controllers, i.e. subjects who determine the purposes and means of processing of Personal Data; 2) Data Processors, i.e. subjects who process Personal Data on behalf of the Data Controller or 3) Joint Data Controllers who jointly determine with Ada srls the purposes and means of processing.
SECTION 4 - TRANSFER OF PERSONAL DATA TO A THIRD COUNTRY OR TO AN INTERNATIONAL ORGANIZATION OUTSIDE THE EUROPEAN UNION.
Your Personal Data is processed by the company within the territory of the European Union and is not disclosed. If necessary, for technical and operational reasons, the company reserves the right to transfer your Personal Data to countries outside the European Union or International Organizations for which there are “adequacy” decisions of the European Commission, or on the basis of adequate guarantees provided by the country to which the Data must be transferred or on the basis of specific derogations provided for by the Regulation.
SECTION 5 - METHODS OF PROCESSING AND PERIODS OF STORAGE OF PERSONAL DATA.
The processing of your Personal Data is carried out using manual, computerised and telematic tools in order to guarantee the security and confidentiality of the data. In general, your Personal Data is stored for a period of ten years from the termination of the contractual relationship to which you are a party. The Personal Data may also be processed for a longer period, where an act interrupting and/or suspending the prescription and/or forfeiture occurs, justifying the extension of the data storage.
Safety.
ADA srls uses a secure payment system that complies with national and international standards in force from time to time. Upon confirmation of payment, the transaction data is sent via a secure connection to the entity (Bank/Company) issuing the payment card or to the entity appointed by the latter, for the sole purpose of obtaining the necessary authorization to execute the transaction.
SECTION 6 - RIGHTS OF THE INTERESTED PARTY.
As an interested party, you may exercise, at any time, against the Data Controller, the rights provided for by the Regulation listed below, by sending a specific written request to the e-mail address commerciale@adaricerca.it.
In the same way, you may revoke at any time the consents expressed with this Notice, without prejudice to the lawfulness of the processing based on the consent given before the revocation. Any communications and actions undertaken by the Foundation, in response to the exercise of the rights listed below, will be carried out free of charge.
However, if your requests are manifestly unfounded or excessive, in particular because of their repetitive nature, the company may charge you a fee, taking into account the administrative costs incurred, or refuse to comply with your requests.
1. Right of access.
You may obtain from the company confirmation as to whether or not your Personal Data is being processed and, where that is the case, obtain access to the Personal Data and the information provided for by art. 15 of the Regulation, including, by way of example, the purposes of the processing, the categories of Personal Data processed, etc.
Where Personal Data is transferred to a third country or to an international organisation, you have the right to be informed of the existence of appropriate guarantees relating to the transfer, as specified in Section 4.
If requested, the company may provide you with a copy of the Personal Data being processed. For any additional copies, Ada srls may charge you a reasonable fee based on administrative costs. If the request in question is submitted by electronic means, and unless otherwise indicated, the information will be provided to you by the company in a commonly used electronic format.
2. Right to rectification.
You may obtain from the company the rectification of your Personal Data which is inaccurate as well as, taking into account the purposes of the processing, the integration of the same if it is incomplete, by providing an additional declaration.
3. Right to erasure (so-called “right to be forgotten”).
You may ask the Data Controller to delete your Personal Data if one of the reasons set out in art. 17 of the Regulation exists, including, by way of example, if the Personal Data is no longer necessary for the purposes for which it was collected or otherwise processed or if the consent on which the processing of your Personal Data is based is revoked by you and there is no other legitimate reason for the processing.
We inform you that the company will not be able to proceed with the cancellation of your Personal Data if their processing is necessary, for example, to fulfill a legal obligation, for reasons of public interest, for the ascertainment, exercise or defense of a right in court.
4. Right to restriction of processing.
You may obtain the limitation of the processing of your Personal Data if one of the hypotheses provided for by art. 18 of the Regulation applies, including, for example:
- the contestation regarding the accuracy of your Personal Data, for the period necessary for the Data Controller to carry out the checks;
- opposition to the processing, pending verification by the Data Controller regarding the possible prevalence of the reasons that legitimise the processing itself.
5. Right to data portability.
If the processing of your Personal Data is based on consent or is necessary for the performance of a contract or pre-contractual measures and the processing is carried out by automated means, you may:
- request to receive the Personal Data provided by you in a structured, commonly used and machine-readable format (e.g. computer and/or tablet);
- transmit your Personal Data received to another Data Controller without impediments from the company. You may also request that your Personal Data be transmitted by the company directly to another Data Controller indicated by you. In this case, it will be your responsibility to provide us with all the exact details of the new Data Controller to whom you intend to transfer your Personal Data, providing us with specific written authorization.
6. Right to object.
You may object at any time to the processing of your Personal Data if the processing is carried out for the performance of a task of public interest or for the pursuit of a legitimate interest of the Data Controller (including profiling).
Should you decide to exercise the right of opposition described here, Ada srls will refrain from further processing your Personal Data, unless there are legitimate reasons to proceed with the processing (reasons prevailing over the interests, rights and freedoms of the interested party), or the processing is necessary for the establishment, exercise or defense of a right in court.
7. Automated individual decision-making, including profiling.
The Regulation provides the interested party with the right not to be subjected to a decision based solely on automated processing of his/her Personal Data, including profiling, which produces legal effects concerning him/her or significantly affects him/her unless the aforementioned decision:
a) is necessary for the conclusion or execution of a contract between you and the Foundation;
b) is authorised by Italian and/or European law;
c) is based on your explicit consent.
In the cases referred to in letters a) and c), the company will implement appropriate measures to protect your rights, freedoms and legitimate interests and you may exercise the right to obtain human intervention on the part of the company to express your opinion or to contest the decision.
Please note, however, that the automated processing carried out by the company is necessary for the execution of the contract, as provided for by art. 22, paragraph 2, subparagraph a), of the Regulation.
8. Right to lodge a complaint with the Data Protection Authority.
Without prejudice to your right to appeal to administrative or judicial proceedings, if you believe that the processing of your Personal Data by the Data Controller is in violation of the Regulation and/or applicable legislation, you may lodge a complaint with the competent Data Protection Authority.